CyberSecBulletin

Sevencs vulnerabilities

We track 2 vulnerabilities in Sevencs products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 31, 2025.

2vulnerabilities
0critical
2high
0exploited
7.4average CVSS score

Latest Sevencs vulnerabilities

  • 7.8 High severity

    Ec2007 Kernel: Incorrect Permission Assignment for Critical Resource

    CVE-2025-64699Sevencs

    An incorrect NULL DACL issue exists in SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22). The regService process, which runs with SYSTEM privileges, applies a Security Descriptor to a device object with no explicitly configured DACL. This condition could allow an

  • 7.0 High severity

    Ec2007 Kernel: Time-of-check Time-of-use (TOCTOU) Race Condition

    CVE-2025-61037Sevencs

    A local privilege escalation vulnerability exists in SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22). The flaw is a Time-of-Check Time-of-Use (TOCTOU) race condition in the license management logic. The regService process, which runs with SYSTEM privileges, cre